When a representative exercises rights for a data subject, the controller or processor must act in the subject's best interests and may hold the request until the relationship is proven; for children it must identify the person exercising the right, process advertising-related data lawfully and inform the parent or guardian of the risks and protections.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.